The Hardening
The accounts your work lives in (email, WhatsApp, phone, social media, bank), gone through one by one with a guide that does not require being technical. The keys are yours and stay with you.
[Product · Monitoring]
Monitoring from the outside, every day.
Four things we monitor, each working on its own, and only bother you when there is something to do. We never read your email, never store your passwords, never install anything: we look at what an attacker would see of you, and alert you first.
01 · Leaks
If one of your passwords has been stolen, you will know before anyone else.
We watch. Your email addresses (up to five) against known breaches and the lists produced by info-stealing malware; with a domain, every credential of your domain and dark-web mentions. Every day.
We protect. The four or five accounts your work lives in: the Hardening goes through them one by one, with the recovery sheet ready.
If it happens, we email you what showed up (the password's mask and strength, never the whole thing) and the steps to cut it off. If you want to go further, “Investigate in depth” searches past archives and raw dumps.
02 · Domain
Your name, watched: impersonations and reputation.
We watch. Domains that look like yours (one letter changed, a hyphen, another ending), websites that copy yours, and your domain's reputation with antivirus vendors, browsers and blocklists.
We protect. Your clients' trust: that nobody deceives them using your name.
If it happens, we keep a capture of the impersonator the moment we find it. You decide: just know about it, or we report it and request its takedown. If your reputation is hit, we clean it.
03 · Email
Nobody sends in your name, and yours gets delivered.
We watch. The three signals that let an email be spoofed or land in spam (SPF, DKIM, DMARC) and the reports the big providers send about who uses your domain.
We protect. Your invoices and quotes: sent by you and delivered to the inbox.
If it happens, a step-by-step guide for non-technical people, with the record to copy and “how do I know it worked”, for Google, Microsoft and any other provider. If you prefer, we set it up for you.
04 · Website
Your website, seen the way an attacker sees it.
We watch. That it responds, that the certificate is valid and renews, that it does not show outdated software versions, and that it carries the security headers browsers expect.
We protect. The first impression and the green padlock: what a client looks at before trusting you.
If it happens, we tell you what to fix and how, for WordPress, a hosting panel, Cloudflare or your own server. And we re-check it on our own.
And around the four things we monitor
The cybersecurity dossier
Everything we watch and how it ended up protected, in an up-to-date, dated document to show a large client, an insurer or a tender. Plus a monthly report by email.
When we do it for you
Everything automatic is in the plan. Human work is charged separately and shown before you ask for it: report and takedown, reputation cleanup, initial setup, in-depth investigation. Pricing →
What we don't do
The uncomfortable truths, up front.
Trust is not requested: it is earned. These are the lines we do not cross.
We never read your email. We watch from the outside, with public lookups and external signals.
We store none of your passwords. You do the Hardening, guided by us.
We do not replace your antivirus. It stops what tries to get in; we tell you what slipped through.
We promise no miracles. Takedowns depend on third parties: we bring craft, evidence and pressure, never guaranteed deadlines.
We sell no badges. The dossier is not a purchased certificate: it is your real, dated picture.
Three steps, two minutes. No card.
Sign up with your email, verify it with one click, and the monitoring starts on its own. When you want more, the portal walks you through it.